github.com/projectdiscovery/nuclei/v2
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
View on Github
Activity
- Latest release
- 3y ago
- Total releases
- 20
- Cadence
- ~12 days
- Last 12 months
- 0
Reach
- Stars
- 30.5k
Details
- First release
- Jan 05, 2023
| Version | Released | |
|---|---|---|
v2.9.15
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.15
patch
Dependencies (81)
+ 73 more |
|
v2.9.14
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.14
patch
Dependencies (81)
+ 73 more |
|
v2.9.13
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.13
patch
Dependencies (79)
+ 71 more |
|
v2.9.12
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.12
patch
Dependencies (79)
+ 71 more |
|
v2.9.11
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.11
patch
Dependencies (79)
+ 71 more |
|
v2.9.10
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.10
patch
Dependencies (79)
+ 71 more |
|
v2.9.9
patch
10 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.9.9
patch
Dependencies (79)
+ 71 more |
|
v2.9.8
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.8
patch
Dependencies (79)
+ 71 more |
|
v2.9.7
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.7
patch
Dependencies (79)
+ 71 more |
|
v2.9.6
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.6
patch
Dependencies (80)
+ 72 more |
|
v2.9.5
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.5
patch
Dependencies (80)
+ 72 more |
|
v2.9.4
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.4
patch
Dependencies (80)
+ 72 more |
|
v2.9.3
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.3
patch
Dependencies (80)
+ 72 more |
|
v2.9.2
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.2
patch
Dependencies (81)
+ 73 more |
|
v2.9.1
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.1
patch
Dependencies (82)
+ 74 more |
|
v2.9.0
minor
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.9.0
minor
Dependencies (85)
+ 77 more |
|
v2.8.9
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.8.9
patch
Dependencies (84)
+ 76 more |
|
v2.8.8
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.8.8
patch
Dependencies (83)
+ 75 more |
|
v2.8.7
patch
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.8.7
patch
Dependencies (84)
+ 76 more |
|
v2.8.6
initial
11 CVEs
CVE-2026-76819
GO-2026-6575
GHSA-vxg7-f2jj-jmqm
Oct 01, 2026
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76804
GO-2026-6574
GHSA-qgw5-7j4f-fg97
Oct 01, 2026
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76805
GO-2026-6571
GHSA-jpvm-9frm-hjcq
Oct 01, 2026
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76803
GO-2026-6577
GHSA-xhmx-w2j4-rw3q
Oct 01, 2026
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-76802
GO-2026-6570
GHSA-jpf4-98qj-qr67
Oct 01, 2026
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-41282
GO-2026-5473
CVE-2026-41645
GHSA-jm34-66cf-qpvr
Jun 25, 2026
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei References
Updated Jul 08, 2026 · Source: OSV.dev
CVE-2026-41646
GO-2026-4965
GHSA-29rg-wmcw-hpf4
May 20, 2026
Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei References Updated May 20, 2026 · Source: OSV.dev
CVE-2024-43405
GO-2024-3114
GHSA-7h5p-mmpp-hgmm
Sep 06, 2024
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-40641
GO-2024-2989
GHSA-c3q9-c27p-cw9h
Jul 22, 2024
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-27920
GO-2024-2645
GHSA-w5wx-6g2r-r78q
Jun 04, 2024
Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-37896
GO-2023-1998
GHSA-2xx4-jj5v-6mff
Aug 23, 2023
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2 Fixed in
2.9.9
References Updated May 20, 2024 · Source: OSV.dev |
v2.8.6
initial
Dependencies (83)
+ 75 more |